ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum IndexGeneral IBM MQ SupportTriggering with different user program

Post new topicReply to topic
Triggering with different user program View previous topic :: View next topic
Author Message
jorgeoliveira
PostPosted: Wed Jun 12, 2019 2:39 am Post subject: Triggering with different user program Reply with quote

Newbie

Joined: 12 Jun 2019
Posts: 2

Hello:


Is it possible to have a process (UNIX/AIX) triggering a shell script from a different user than the mqm user? Of course the script shouldn't have execute permission for everyone on the system.

Right now what I do to make it work is changing the script group to mqm and do a chmod u+s to the script.

Example:
-rwsr-x--- 1 admapp mqm 7410 Jan 05 2018 desenvFT.sh

Thank you in advance for all the help!

Jorge
Back to top
View user's profile Send private message
fjb_saper
PostPosted: Wed Jun 12, 2019 6:14 am Post subject: Reply with quote

Grand High Poobah

Joined: 18 Nov 2003
Posts: 20111
Location: LI,NY

Have you checked with what ID you're running the trigger monitor?
_________________
MQ & Broker admin
Back to top
View user's profile Send private message Send e-mail
jorgeoliveira
PostPosted: Thu Jun 13, 2019 1:12 am Post subject: Reply with quote

Newbie

Joined: 12 Jun 2019
Posts: 2

Hello, the trigger monitor runs as mqm.

I've checked that the runmqtrm executable has 750 permissions), but I don't want to change this binary as my changes would be overwritten by a new patch or version.

Does anyone use a copy of runmqtrm with full permissions to have as many trigger monitors running with different users as needed?


Thank you!
Back to top
View user's profile Send private message
gbaddeley
PostPosted: Thu Jun 13, 2019 6:40 pm Post subject: Reply with quote

Jedi

Joined: 25 Mar 2003
Posts: 2019
Location: Melbourne, Australia

The MQ trigger monitor usually runs as mqm. The triggered script could do a "sudo su - YourUserid -c YourScriptName" command to run another script under a different user. sudo rules would need to be set up to allow this to be done without a password.
HTH, Glenn.
_________________
Glenn
Back to top
View user's profile Send private message
Display posts from previous:
Post new topicReply to topic Page 1 of 1

MQSeries.net Forum IndexGeneral IBM MQ SupportTriggering with different user program
Jump to:



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP


Theme by Dustin Baccetti
Powered by phpBB 2001, 2002 phpBB Group

Copyright MQSeries.net. All rights reserved.